Issues

• client_auth mode ignored when using leaf verifier

  caddyserver/caddy#8250 · Filter by author etihwo opened on Oct 17, 2026

• fuzz-replacer: Timeout in fuzz-replacer

  caddyserver/caddy#8247 · Filter by author mohammed90 opened on Oct 17, 2026

• Method matcher uppercases case-sensitive extension methods

  bug 🐞
  caddyserver/caddy#8244 · Filter by author steadytao opened on Oct 17, 2026

• logging: ip_mask logs <nil> for IPv6 clients when only an IPv4 mask is set

  caddyserver/caddy#8240 · Filter by author jayhemnani9910 opened on Oct 17, 2026
  1

• reverse_proxy: request trailer values are dropped

  bug 🐞
  caddyserver/caddy#8235 · Filter by author hholst80 opened on Oct 16, 2026
  2

• Config reload closes newly accepted HTTP/1.1 connections with no response (Shutdown before the listener stops accepting)

  caddyserver/caddy#8233 · Filter by author ramonmalcolm10 opened on Oct 16, 2026
  1

• v2.11.6 silently disables client authentication on subdomains that previously inherited it

  bug 🐞
  caddyserver/caddy#8232 · Filter by author reasonableperson opened on Oct 16, 2026 · v2.12.0
  

• caddy reload hangs forever and the admin API dies when the cache maintenance tick lands during TLS.Provision (nil pointer in getAutomationPolicyForName, read lock leaked)

  bug 🐞
  caddyserver/caddy#8231 · Filter by author Roanmh opened on Oct 15, 2026
  2

• fuzz-parse-network-address: Timeout in fuzz-parse-network-address

  bug 🐞
  caddyserver/caddy#8229 · Filter by author mohammed90 opened on Oct 15, 2026

• reverseproxy: health-check redirects still dial the original upstream

  bug 🐞
  caddyserver/caddy#8222 · Filter by author Indra55 opened on Oct 15, 2026
  4

• Session ticket lifetime is too long

  caddyserver/caddy#8218 · Filter by author Synchro opened on Oct 15, 2026
  1

• fileserver: precompressed sidecar's Content-Encoding and Content-Length end up on error responses

  caddyserver/caddy#8204 · Filter by author NitinKumar004 opened on Oct 13, 2026

• Go 1.26 can desynchronise HTTP/1 connections after early upstream responses

  bug 🐞dependencies ⛓️
  caddyserver/caddy#8196 · Filter by author bani6809 opened on Oct 11, 2026 · v2.12.0
  6

• reverseproxy: WebSocket fails with NS_ERROR_NET_RESET in Firefox when network.dns.force_use_https_rr = true

  caddyserver/caddy#8193 · Filter by author androw opened on Oct 11, 2026
  4

• reverseproxy: request hangs when HTTP/2 upstream resets stream while request body read is pending

  caddyserver/caddy#8185 · Filter by author slashfast opened on Oct 9, 2026
  4

• Expose QUIC packet size / PMTUD options (HTTP/3 stalls when path MTU discovery overshoots)

  caddyserver/caddy#8175 · Filter by author MikeRuf opened on Oct 8, 2026
  2

• Panic in deferred write-timeout flush when an upgraded (hijacked) connection outlives write_timeout

  bug 🐞
  caddyserver/caddy#8151 · Filter by author Droid0012 opened on Oct 5, 2026
  1

• core: config reload cleans up handler modules while requests are still running

  caddyserver/caddy#8143 · Filter by author RentnerKev opened on Oct 4, 2026
  2

• Caddy intercepts /.well-known/acme-challenge silently even with a proxy/webroot route override specified.

  documentation 📚
  caddyserver/caddy#8096 · Filter by author Nemezor opened on Oct 1, 2026
  6

• MatchTLS is the only core HTTP matcher without CEL expression support

  caddyserver/caddy#8087 · Filter by author stackedbyaradhya opened on Sep 30, 2026

• http: on config reload, the grace period context is cancelled as soon as App.Stop returns, so graceful shutdown of the old servers always ends immediately with "context canceled"

  bug 🐞
  caddyserver/caddy#8078 · Filter by author eemami65 opened on Sep 28, 2026
  4

• Expose the negotiated TLS key exchange (curve) as a placeholder and access-log field

  feature ⚙️help wanted 🆘
  caddyserver/caddy#8065 · Filter by author SPH00123 opened on Sep 25, 2026
  5

• Feature request: expose version/build info via admin API endpoint

  discussion 💬
  caddyserver/caddy#8044 · Filter by author zackwag opened on Sep 20, 2026
  3

• caddyauth: basic_auth accepts duplicate usernames that only collide after {env.*} expansion

  bug 🐞help wanted 🆘
  caddyserver/caddy#8037 · Filter by author Santoshkumarpuppala opened on Sep 19, 2026
  2

• Open redirect on carefully crafted paths

  bug 🐞
  caddyserver/caddy#8023 · Filter by author wdullaer opened on Sep 15, 2026
  10